Key Per I/O - Fine Grain Encryption for Storage

Learn about the Key Per I/O (KPIO) project, a collaborative initiative between NVM Express® and the Trusted Computing Group (TCG) Storage Work Group, in this 50-minute technical presentation. Explore the architectural differences between traditional Self-Encrypting Drives (SED) and the new KPIO Security Subsystem Class, which enables fine-grain encryption for storage devices. Discover how KPIO allows management of numerous encryption keys and secure downloading into NVM subsystems, enabling per-command encryption with different keys. Master the implementation of granular encryption schemes supporting various use cases including EU-GDPR compliance, data erasure across multiple disks, multitenancy data management, and encryption of individual sensitive files. Gain insights into the proposed TCG KPIO SSC specification, NVMe command features, and current standardization proposals through detailed explanations from industry experts Frederick Knight of NetApp and Festus Hategekimana of Solidigm Technology.